Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/189D4918C0E111EF88A845A0762E951A.roa
File: 189D4918C0E111EF88A845A0762E951A.roa (raw, json)
Hash identifier: 7Cvgh//aZKHJipbHvQdP83xY7pCodbTKJvTCblpAPBo=
Subject key identifier: DD:F6:84:E4:A3:22:35:AE:F1:1B:C2:E1:BC:6C:04:A5:DE:66:F2:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/189D4918C0E111EF88A845A0762E951A.roa
Signing time: Mon 23 Dec 2024 03:50:49 +0000
ROA not before: Mon 23 Dec 2024 03:50:45 +0000
ROA not after: Wed 10 Dec 2025 03:50:45 +0000
asID: 984
IP address blocks: 154.89.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73452 (0x11eec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:50:45 2024 GMT
Not After : Dec 10 03:50:45 2025 GMT
Subject: CN=6768de18-87cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:e4:65:8a:57:b3:3e:20:ff:54:49:8d:78:
d8:f4:92:57:b2:dd:63:3e:21:7e:37:09:c8:19:bb:
2b:49:52:14:64:8b:1f:87:56:71:54:5d:e3:bf:12:
d3:de:e3:55:c7:c9:f4:7d:c0:32:71:c9:39:59:9c:
eb:48:9a:0b:ad:a8:a7:87:07:52:cc:89:f6:a2:99:
09:b2:da:0a:a2:4c:b8:f0:b5:22:f7:f0:28:f8:1e:
c8:2b:9a:2a:2e:93:62:df:66:0b:a8:d0:52:36:bd:
08:19:29:eb:67:de:76:74:64:5d:fb:19:81:bf:cb:
d0:e8:3c:f5:1d:6f:29:f1:a3:4e:ab:db:c8:d6:b2:
21:82:6f:45:75:10:1a:ba:e7:dc:ab:ad:18:6e:98:
c4:cf:54:6f:97:7a:81:17:89:6a:72:5a:d0:e0:82:
96:aa:cb:63:e1:4c:08:3c:4d:69:06:fc:35:fc:d6:
9f:7c:fa:10:f7:27:73:95:0a:bb:59:8f:c3:dd:c4:
b4:67:ce:03:86:6f:75:b0:ff:c8:8d:35:a5:79:c3:
70:82:c7:79:8b:74:b8:57:3b:95:46:c5:4a:1d:69:
a5:25:8f:52:fc:b0:4c:fa:51:b3:ba:c9:41:f1:95:
52:34:64:cf:11:37:b1:3b:93:d1:f9:c2:89:fd:85:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:84:E4:A3:22:35:AE:F1:1B:C2:E1:BC:6C:04:A5:DE:66:F2:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/189D4918C0E111EF88A845A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.212.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0f:59:ee:b8:57:8b:11:08:df:35:18:48:8f:11:1e:0d:31:
2f:50:0c:3d:07:26:03:a1:ed:7f:d3:e6:75:74:15:0a:71:b8:
92:55:dd:e8:9a:c8:a9:0f:37:6e:14:f7:fd:f4:b6:a0:53:58:
c7:9c:9a:6d:29:cd:f2:00:c5:82:61:90:46:27:70:21:d8:21:
7c:15:bd:8a:e4:f1:dd:17:c2:59:18:d5:1f:b4:4b:a5:25:ee:
d0:68:54:42:66:7b:85:86:e3:2a:a7:93:b2:d6:d8:82:4a:bf:
3d:ee:b4:cb:f5:01:87:1e:fa:f4:c8:6d:05:63:b9:60:86:34:
ec:8e:4f:f0:17:c4:24:61:b0:e1:8b:12:b7:a7:08:69:28:c2:
28:71:ca:84:05:75:1b:8e:e1:3c:af:cf:36:d2:a1:94:4f:8b:
d0:74:cd:0c:3b:90:4c:de:f3:25:4e:02:43:3b:6a:5d:f3:e4:
89:77:d5:f8:d1:92:7e:ea:38:e5:2d:ff:f3:e0:2b:05:56:30:
7e:cd:37:00:db:24:6d:b6:5f:bb:c0:cb:d5:2c:87:f3:ee:e9:
28:e0:79:9e:0f:09:19:dd:e6:3a:ee:ea:51:04:4f:51:00:b6:
b1:1e:5e:80:30:49:81:e1:d6:56:15:42:93:b4:22:73:8d:43:
14:16:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:26 2025 by rpki-client